Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
File: p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft (raw, json)
Hash identifier: s84/fzRPx8viU9y5sR2wnYUx1JGmus59U7FJ0Qz62Us=
Subject key identifier: 15:26:C3:30:11:F3:B3:5D:3C:DB:B4:76:B3:53:A6:DE:CF:A8:3D:D4
Authority key identifier: A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C
Certificate issuer: /CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c
Certificate serial: 019D3940FBEDB983E94D16494C77BFE79888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
Manifest number: 8D
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: F4WIL5lRn1e8KEX9ZaKzwbn8OK0.roa (hash: fsVPNfzwVtcxP1d7ng53S1s+p3QUE/oW7iQYmnK5p84=)
2: p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl (hash: t9yYLrM7aCUdBJbDKi4uHpT2JxyvG0OYx1fGavl+8gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fb:ed:b9:83:e9:4d:16:49:4c:77:bf:e7:98:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=1526c33011f3b35d3cdbb476b353a6decfa83dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:f1:ed:33:83:49:55:9a:24:3a:ab:e9:0c:
ab:c0:3a:04:77:39:6a:9c:11:2e:2d:d0:b3:60:bd:
29:40:ee:a9:71:9d:7a:90:bb:fd:84:82:fb:c8:65:
b9:69:f0:c0:c5:3c:dc:de:49:76:d1:50:69:25:fb:
e3:1d:37:5e:3e:3f:fa:d6:21:98:fd:c6:95:4e:88:
cd:68:65:a8:d5:94:e7:a5:09:ce:f7:0e:94:68:d1:
09:98:c1:f1:94:3f:d5:bb:c7:b4:5e:4a:b2:10:9d:
9a:eb:91:9a:a1:53:c7:e3:e9:83:c2:2a:ff:61:f9:
69:d2:db:2c:0a:bf:7a:87:ca:f3:5d:8e:75:b8:d9:
49:46:7c:db:eb:45:40:61:5b:b2:12:81:0b:90:58:
e1:a3:63:5f:af:88:57:ec:77:ea:02:5c:55:00:b9:
a5:17:63:26:22:4d:03:69:c2:42:3c:34:d2:b4:a2:
ea:de:c3:87:a9:3d:d5:c1:b1:be:2b:5b:81:3a:4e:
1c:41:f6:45:4d:77:ed:23:1f:97:e1:30:5c:e7:ec:
b7:e0:ec:9b:26:43:94:c5:f3:81:90:be:91:4f:fb:
d8:d9:48:e0:80:18:d2:47:3e:32:d8:bb:8a:f2:81:
c7:3e:92:e6:26:4a:20:8c:72:17:30:cd:aa:ab:3e:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:26:C3:30:11:F3:B3:5D:3C:DB:B4:76:B3:53:A6:DE:CF:A8:3D:D4
X509v3 Authority Key Identifier:
keyid:A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fa:78:06:33:28:d5:bc:fd:27:0c:a1:97:5a:84:28:45:6d:
8e:fd:5f:6c:f5:f9:6f:62:86:85:6d:52:96:12:54:7a:87:f5:
49:9f:47:dc:ab:dd:4f:d4:0d:66:b6:1d:5c:83:d4:35:cd:e3:
a2:6f:0b:d7:f7:66:01:b8:6c:4a:03:b7:95:eb:1f:46:6b:10:
b7:dd:da:9a:7c:1b:3d:08:11:28:95:c8:9d:34:19:ef:ff:98:
16:d4:d8:b4:fa:01:8a:fc:b4:8c:0f:b9:53:96:a2:23:0d:c4:
30:76:0d:6b:98:d9:7c:9c:92:ab:58:8f:8c:51:b2:e6:91:c5:
f8:8e:f1:93:6e:56:25:f1:4d:9a:10:0a:a3:97:76:c3:24:21:
74:d2:13:c4:fe:e3:a4:7c:c8:38:67:3f:cd:92:21:bf:6a:cb:
be:4e:82:b8:c1:8b:2a:ab:6f:8b:52:0f:23:48:ff:45:10:b9:
31:aa:af:ee:21:6a:13:b6:a9:af:31:69:83:95:d8:6e:e6:7f:
cf:87:49:41:b6:68:7d:1a:ee:a5:70:1a:b6:0c:af:29:6f:35:
8a:39:52:b8:e8:90:5c:b3:ac:d2:04:7e:16:40:0a:82:b3:06:
c2:1d:d7:c4:b2:18:33:e3:17:73:a5:7f:6c:c9:a1:99:f2:4f:
2e:8a:3f:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QPvtuYPpTRZJTHe/55iIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YjQ4N2JlNGYyN2M5MWFlMzJhMTdiYTJkZWQ2N2MzZDUx
NTNkM2MwHhcNMjYwMzI5MTEwMDUzWhcNMjYwMzMwMTEwMDUzWjAzMTEwLwYDVQQD
EygxNTI2YzMzMDExZjNiMzVkM2NkYmI0NzZiMzUzYTZkZWNmYTgzZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kPx7TODSVWaJDqr6QyrwDoEdzlq
nBEuLdCzYL0pQO6pcZ16kLv9hIL7yGW5afDAxTzc3kl20VBpJfvjHTdePj/61iGY
/caVTojNaGWo1ZTnpQnO9w6UaNEJmMHxlD/Vu8e0XkqyEJ2a65GaoVPH4+mDwir/
Yflp0tssCr96h8rzXY51uNlJRnzb60VAYVuyEoELkFjho2Nfr4hX7HfqAlxVALml
F2MmIk0DacJCPDTStKLq3sOHqT3VwbG+K1uBOk4cQfZFTXftIx+X4TBc5+y34Oyb
JkOUxfOBkL6RT/vY2UjggBjSRz4y2LuK8oHHPpLmJkogjHIXMM2qqz7PAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUmwzAR87NdPNu0drNTpt7PqD3UMB8GA1UdIwQY
MBaAFKe0h75PJ8ka4yoXui3tZ8PVFT08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDdTSHZrOG55UnJqS2hlNkxlMW53OVVWUFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zYTRhZTctM2U4My00Y2U5LWE5ZjMt
ODZiZGJmNzkwMTIxLzEvcDdTSHZrOG55UnJqS2hlNkxlMW53OVVWUFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8zYTRhZTctM2U4My00Y2U5LWE5ZjMtODZiZGJmNzkwMTIx
LzEvcDdTSHZrOG55UnJqS2hlNkxlMW53OVVWUFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPp4BjMo
1bz9Jwyhl1qEKEVtjv1fbPX5b2KGhW1SlhJUeof1SZ9H3KvdT9QNZrYdXIPUNc3j
om8L1/dmAbhsSgO3lesfRmsQt93amnwbPQgRKJXInTQZ7/+YFtTYtPoBivy0jA+5
U5aiIw3EMHYNa5jZfJySq1iPjFGy5pHF+I7xk25WJfFNmhAKo5d2wyQhdNITxP7j
pHzIOGc/zZIhv2rLvk6CuMGLKqtvi1IPI0j/RRC5Maqv7iFqE7aprzFpg5XYbuZ/
z4dJQbZofRrupXAatgyvKW81ijlSuOiQXLOs0gR+FkAKgrMGwh3XxLIYM+MXc6V/
bMmhmfJPLoo/vw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:30 2026 by rpki-client